Fire and forget script automating the finding of targets vulnerabilities.

Usage: ./thedumbpentester [domain.com/IP/companyname/maintenance] [targetmode:company/domain/ip] [scanmode] [*web*] [*user wordlist*] [*password wordlist*] [*openVASurl:port*] [*openVASuser*] [*openVASpassword*] [*debug*] [*noadditionalbrute*]

1. Everything should be automatic.
2. Only open source tools used.
3. Report contains only useful information for direct exploitation.

git clone ./thedumbpentester.sh maintenance

Getting only reconnaissance data

./thedumbpentester.sh yourdomainz.xxx domain recononly

Fast scan and web pentest

./thedumbpentester.sh yourdomainz.xxx domain fast web

Default scan

./thedumbpentester.sh yourdomainz.xxx

Stealth scan

./thedumbpentester.sh yourdomain.xxx domain stealth

Basically this script wraps and pipes around other various pentest tools if you feed it a target.

DNS

dig fierce dnsrecon subbrute

OSINT / DORKS

sublist3r harvester recon-ng

WEBSITES

crt.sh hackertarget netcraft viewdns

SCAN

masscan nmap traceroute

VULNERABILITY

nmapNSE searchsploit pompem

BRUTE

nmapNSE hydra SecLists

WEB SCAN

dirb whatweb arachni sqlmap

REPORT

grep zenmap firefox